CVE-2019-0675: Critical severity microsoft office vulnerability

Published Mar 5, 2019

Updated

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0671, CVE-2019-0672, CVE-2019-0673, CVE-2019-0674.

Affected Software

1 affected component

Microsoft Office=2010-sp2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0675

Event History

Mar 5, 2019

CVE Published

11:29 PM

Mar 6, 2019

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-0675?

CVE-2019-0675 is rated as critical due to its potential for remote code execution.

How do I fix CVE-2019-0675?

To fix CVE-2019-0675, users should apply the latest security updates provided by Microsoft for affected versions.

What software is affected by CVE-2019-0675?

CVE-2019-0675 affects Microsoft Office Access Connectivity Engine, specifically Office 2010 SP2.

What are the potential impacts of CVE-2019-0675?

Exploitation of CVE-2019-0675 could allow an attacker to execute arbitrary code on the system.

How can I determine if my system is vulnerable to CVE-2019-0675?

To determine if your system is vulnerable to CVE-2019-0675, check if you are running Microsoft Office 2010 SP2 without the latest updates.